GET /sessions/{id} — full session detail and events

Returns complete detail for a single session, including every individual redaction event with span coordinates, confidence scores, and token metadata. This is the endpoint to use when you need to investigate a specific call, verify what PHI was detected, or pull the merkle_root_hex for audit chain-of-custody verification. If log_payloads: true is set in the agent’s masking policy, the response also includes the original request, masked payload sent to the LLM, and the final response. Payloads are null by default.

Endpoint

GET /api/v1/sessions/{session_id}

Requires masker_session authentication.

Path parameters

string

required

The session’s ID in sess_* ULID format, e.g. sess_01HYZ....

Response fields

object

required

Full session object.

Hide session object fields

string

required

Session ID in sess_* ULID format.

string

required

ID of the agent that handled this session.

string

required

Display name of the agent.

string

required

ISO 8601 UTC timestamp when the session started.

string

required

ISO 8601 UTC timestamp when the session ended.

number

required

Total session duration in milliseconds.

string

required

Outcome: ok, error, or partial.

string

required

LLM model used, e.g. gpt-4o-mini.

string

required

Name of the masking policy active at the time of the session.

number

required

Version of the masking policy active at the time of the session.

object

required

Breakdown of processing latency by pipeline stage.

Show stage duration fields

number

Time spent on PHI detection in milliseconds.

number

Time spent on tokenization (vault operations) in milliseconds.

number

Time spent waiting for the upstream LLM in milliseconds.

number

Time spent on token rehydration in the response in milliseconds.

object[]

required

Array of individual redaction events for this session.

Show event fields

string

Event ID in evt_* ULID format.

string

Detection pass that identified this entity (e.g. gemma).

string

PHI category, e.g. NAME, PHONE, DOB, SSN.

number[]

[start, end] character offsets in the original message.

number

Model confidence score from 0 to 1.

string

Tokenization format applied, e.g. MSKV1.

string

Key ID used to issue the token, e.g. K_HEALTHCARE.

object

required

Raw payloads. All fields are null unless log_payloads: true is set in the agent’s policy.

Show payload fields

Original request body received by the proxy.

Masked request body forwarded to the upstream LLM.

Final response returned to the caller, with tokens rehydrated.

Example

curl -H "Cookie: masker_session=ey..." \
  https://masker-voice.fly.dev/api/v1/sessions/sess_01HYZ...

Response

{
  "session": {
    "id": "sess_01HYZ...",
    "agent_id": "agt_01HYZ...",
    "agent_name": "appointment-bot-prod",
    "started_at": "2026-05-03T21:14:32Z",
    "ended_at": "2026-05-03T21:14:32.794Z",
    "duration_ms": 794,
    "status": "ok",
    "upstream_model": "gpt-4o-mini",
    "policy_name": "healthcare-default",
    "policy_version": 1,
    "stage_durations_ms": {
      "detection": 56,
      "tokenize": 4,
      "upstream": 728,
      "rehydrate": 6
    },
    "events": [
      {
        "event_id": "evt_01HYZ...",
        "pass": "gemma",
        "entity_kind": "NAME",
        "span": [142, 156],
        "confidence": 0.94,
        "token_kind": "MSKV1",
        "kid": "K_HEALTHCARE"
      }
    ],
    "payloads": {
      "request": null,
      "masked": null,
      "response": null
    }
  }
}

Errors

Status	Code	Meaning
`401`	`unauthenticated`	Missing or invalid `masker_session` cookie
`404`	`session_not_found`	No session with this ID exists in your account

Overview

Agents

Sessions

Proxy & Webhooks

GET /sessions/{id} — full session detail and events

Endpoint

Path parameters

Response fields

Example

Errors

​Endpoint

​Path parameters

​Response fields

​Example

​Errors

Endpoint

Path parameters

Response fields

Example

Errors